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DETAILED ACTION 
Status of Claims 

1. This action is in response to the reply received on 04 August 2005 and restriction election 
received on 15 December 2005. 

2. Claims 1-72 have been elected. 

3. Claims 73-100 have been withdrawn. 

4. Claims 1-72 have been examined. 

RESPONSE TO ARGUMENTS 

5. Applicant's arguments received on 04 August 2005 have been fully considered but they are not 
persuasive. Referring to the previous Office action, Examiner has cited relevant portions of the 
references as a means to illustrate the systems as taught by the prior art. As a means of 
providing further clarification as to what is taught by the references used in the first Office action, 
Examiner has expanded the teachings for comprehensibility while maintaining the same grounds 
of rejection of the claims, except as noted above in the section labeled "Status of Claims." This 
information is intended to assist in illuminating the teachings of the references while providing 
evidence that establishes further support for the rejections of the claims. It appears as if the 
Appellant is attacking the references in a piecewise fashion, instead of in combination, as 
intended by the Examiner and as shown above in the rejections under 35 USC § 103(a). 
O'Flaherty shows access privileges that are controlled by the user and Cavoukian discusses the 
use of the biometric to protect the privacy and confidential information of the user without 
divulging his or her identity. Regardless of how the art may be construed, it is clear to one of 
ordinary skill in the art that the combination of Bianco with O'Flaherty and Cavoukian discloses a 
user-customizable rules-based biometric system. In summary, the Examiner has taken the 
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broadest and most reasonable interpretation of the claim limitations as written, in light of the 
specification. Based on this analysis, the combination of Bianco, O'Flaherty, and Cavoukian 
anticipates the claims of the pending application. 



Claim Rejections - 35 USC § 103 



6. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all obviousness 
rejections set forth in this Office action: 



A patent may not be obtained though the invention is not identically disclosed or 
described as set forth in section 102 of this title, if the differences between the subject matter 
sought to be patented and the prior art are such that the subject matter as a whole would have 
been obvious at the time the invention was made to a person having ordinary skill in the art to 
which said subject matter pertains. Patentability shall not be negatived by the manner in which 
the invention was made. 



7. Claims 1-34, 36-37, 39, 41, 43-46, 49, 50, and 52-72 are rejected under 35 U.S.C. 103(a) as 
being obvious over Bianco et al (U.S. Patent No. 6,256,737) in view of O'Flaherty et al. (US 
2001/00121247 A1), and further in view of Cavoukian, "Building in Privacy" (10 June 1996). 



Examiner's note: Examiner has pointed out particular references contained in the prior art of 
record in the body of this action for the convenience of the Applicant. Although the specified 
citations are representative of the teachings in the art and are applied to the specific limitations 
within the individual claim, other passages and figures may apply. Applicant, in preparing the 
response, should consider fully the entire reference as potentially teaching all or part of the 
claimed invention, as well as the context of the passage as taught by the prior art or disclosed by 
the examiner. 
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In re claims 1, 54, 57, 63, 64, and 67, Bianco et al. shows in figures 1-34 and related 
text a tokenless biometric method for processing electronic transmissions, using at least one user 
biometric sample, an electronic identicator and an electronic rule module clearinghouse, said 
method comprising the steps of: a user registration step wherein a user registers with an 
electronic identicator at least one registration sample (column 10, lines 7-13); the formation of a 
rule module customized to the user in a rule module clearinghouse, wherein at least one pattern 
data (accounting group) (wherein it is noted that page 37, line 8 of the instant application defines 
a pattern data to include the user's company division), of a user is associated with at least one 
execution command (access group of resources) of the user (column 2, lines 53-66; column 18, 
lines 8 - 17); a user identification step, wherein the electronic indicator compares bid biometric 
sample taken directly from the person of the user with at least one previously registered biometric 
sample for producing either a successful or failed identification of the user (column 8, lines 14 - 
21); a command execution step, wherein upon successful identification of the user at least one 
previously designated rule module of the user is invoked to execute at least one electronic 
transmission (column 8, lines 19 -21; column 24, lines 53-56); wherein a biometrically authorized 
electronic transmission is conducted without the user presenting any personalized man-made 
memory tokens such as smartcards, or magnetic swipes (column 7, lines 47 - 67). With regard 
to the limitation of authenticating a user, Bianco, in column 2, line 67 to column 3, line 5 discloses 
identification of a user. 

Bianco, as shown above discloses a customizable rule module. Bianco does not 
specifically disclose that the access to privileged information that is modifiable by the user. 
O'Flaherty, however, in Figures 2 and 3 and associated text, shows access privileges that are 
controlled by the user. It would have been obvious to modify Bianco from using a system 
administrator to change access privileges to O'Flaherty's use of allowing a user to define access 
rights to personal information because this prevents unlawful use and/or use of personal 
information. 
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Cavoukian, in at least the section labeled "Biometric Encryption" discusses the use of the 
biometric to protect the privacy and confidential information of the user without divulging his or 
her identity. This reference supports the Examiner's position that the use of a biometric to control 
the identification and subsequent authentication of a user with regard to their own personal 
information is known in the art. It would have been obvious to modify Bianco and O'Flaherty with 
Cavoukian because this prevents unlawful use and/or use of personal information. 

In re claim 2, Bianco et al. shows in figures 1-34 and related text the electronic rule 
module clearinghouse communicates with one or more third-party computers (Fig. 1 ). 



In re claims 3 and 52, Bianco et al. shows in figures 1-34 and related text any of the 
following: accessing stored electronic data customized to the user's rule modules, processing 
electronic data customized to the users rule modules, presentation of electronic data customized 
to the user's rule modules (column 1, lines 8-29). Se also column 29, line 40 to column 30, line 
14. 

In re claims 4, 60, 61, and 69, Bianco et al. shows in figures 1-34 and related text 
wherein the pattern data comprises any of the following; a user unique identification code, 
demographic information; an email address, a financial account, a secondary biometric, internet 
browsing patterns, a non-financial data repository account, a telephone number, a mailing 
address, purchase patterns, data on pre-paid accounts or memberships for products or services, 
electronic data usage patterns, employee status, job title, data on user behavior patterns, a digital 
certificate, a network credential, an internet protocol address, a digital signature, an encryption 
key, and instant messaging address, personal medical records, an electronic audio signature, an 
electronic visual signature (column 54, lines 52 -57). 
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In re claim 5, Bianco et al. shows in figures 1-34 and related text pattern data (group) for 
a user is provided for the rule module by any of he following the user, the electronic rule module 
clearinghouse, or an authorized third party (column 19, lines 13-17). 

In re claim 6, Bianco et al. shows in figures 1-34 and related text an execution command 
(group of resources that each member will need to access) for a user is provided for the rule 
module by any of the following: the user, the electronic rule module clearinghouse, or an 
authorized third party (column 19, lines 13-17). 

In re claim 7, Bianco et al. shows in figures 1-34 and related text a user re-registration 
check step, wherein the user's registration biometric sample is compared against previously 
registered biometric samples wherein if a match occurs, the computer system is alerted to the 
fact that the user has attempted to re-register with the electronic identicator (column 29, lines 4- 
10). 

In re claim 8, Bianco et al. shows in figures 1-34 and related text any of the following: a 
fingerprint, a facial scan, a retinal image, an iris scan, and a voice print (column 7, lines 59-67). 

In re claim 9, Bianco et al. shows in figures 1-34 and related text during the identification 
step the user provides a personal identification code to the electronic identicator along with a bid 
biometric sample for the purposes of identifying the user (column 23, lines 31 - 33). 



In re claim 10, Bianco et al. shows in figures 1-34 and related text a biometric theft 
resolution step, wherein a user's personal identification code is changed when the user's 
biometric sample is determined to have been fraudulently duplicated (column 28, line 60 - 
column 29, line 39). 
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In re claim 11, Bianco et al. shows in figures 1-34 and related text execution of an 
execution command authorizes the user to access stored electronic data (column 1, lines 7-17). 

In re claim 12, Bianco et al. shows in figures 1-34 and related text accessing stored 
electronic data results in activation of an Internet-connected device (column 1, lines 15 - 29). 

In re claim 13, Bianco et al. shows in figures 1-34 and related text an execution 
command processes electronic data to provide the user with a requested electronic transmission 
(column 54, lines 52-56). 

In re claim 14, Bianco et al. shows, in figures 1-34 and related text, processing 
comprises invoking the following; a user's digital certificate, a user's identity scrambler, a user's 
interactive electronic consumer loyalty or consumer rewards program, a user's interactive 
electronic advertising, a user's interactive instant messaging program, a user's email 
authentication, and an automated electronic intelligent agent for electronic data search and 
retrieval that is customized to the user's requests (column 54, lines 52-56). 

In re claim 15, Bianco et al. shows, in figures 1-34 and related text an execution 
command presents electronic data that is customized to the user's retested electronic 
transmission (column 2, lines 1-13). Where it is noted in this example that e-mail received by a 
user is commonly known in the art to be customized to the user. 

In re claim 16, Bianco et al. shows, in figures 1-34 and related text a user log-in repeat 
step, wherein during an electronic transmission the user is periodically required by the electronic 
identicator to present the user's bid biometric sample or at least one of the user's pattern data 
(column 30, lines 15-29). 
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In re claim 17, Bianco et al. shows, in figures 1-34 and related text, a communications 
step wherein any if the following is used: the internet, an intranet, an extranet, a local area 
network, a wide area network (column 2, lines 1-13). 

In re claim 18, Bianco et al. shows, in figures 1-34 and related text a third party 
registration step wherein a third-party registers identification data with the electronic identicator, 
the identification data comprising any of the following; a biometric, a digital certificate, an Internet 
protocol address, or a biometric input apparatus hardware identification code (column 18, lines 
50-64). 

In re claim 19, Bianco et al. shows, in figures 1-34 and related text a third party 
identification step, wherein a third-party providing the user with electronic transmissions is 
identified by the electronic identicator by comparing the third-party's bid identification data with 
the third-party's registered identification data (column 18, lines 50-64). 

In re claim 20, Bianco et al. shows, in figures 1-34 and related text, a biometric input 
apparatus, for providing a bid or registration biometric sample of a user to the electronic 
identicator; wherein a user registers with an electronic identicator at least one registration 
biometric sample taken directly form the person of the user (column 10, lines 7-13); an 
electronic rule module clearinghouse, having at least one rule module further comprising at least 
one pattern data of a user associated with at least one execution command of the user, for 
executing at least one electronic transmission (column 2, lines 53-66; column 18, lines 8-17); an 
electronic identicator, for comparing the bid biometric sample with registered biometric samples of 
users (column 8, lines 14 - 21); a command execution module for invoking at least one previously 
designated execution command in the electronic rule module clearinghouse to execute an 
electronic transmission (column 8, lines 19 -21; column 24, lines 53-56); wherein no man-made 
memory tokens such as smartcards, or magnetic swipe cards are presented by the user to 
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conduct the electronic transmission (column 7, lines 47 - 67). With regard to the limitation of 
authenticating a user, there are many equivalent techniques of granting access to a user, the 
process being merely one of design choice. As shown in the definition above, granting access 
only to properly authorized persons allows access to a specified extent (rules) according to their 
permission right. As shown, identification and authorization are nearly synonymous within the 
electronic security arts. With regard to the limitation of a rules module that is "user-customized 
means having been customized by or for a user," Bianco clearly discloses biometric policies 
(column 18, lines 18-26), which are inherently set either by a user who is setting up his account or 
by a system administrator who defines access rights to a system depending on the level of 
permission granted. Clearly, if a user (primary or subordinate) is associated with a particular 
policy, the user is held to the rules of that policy. 

In re claim 21, Bianco et al. shows, in figures 1-34 and related text the command module 
communicates with one or more third-party computers (column 24, lines 53-56; column 1, lines 15 
-column 2, lines 17). 

In re claim 22, Bianco et al. shows, in figures 1-34 and related text the pattern data 
comprises any of the following; a user unique identification code, demographic information, an 
email address, a financial account, a secondary biometric, a non-financial data repository 
account, a telephone number, a mailing address, purchasing patterns, data on pre-paid accounts 
or memberships for products or services, electronic data usage patterns, employee status, job 
title, data on user behavior patterns, a digital certificate, a network credential, an Internet protocol 
address, a digital signature, an encryption key, an instant messaging address, personal medical 
records, and electronic audio signature, and an electronic visual signature (column 54, lines 52 - 
57), 



Application/Control Number: Page 10 

09/398,914 

Art Unit: 3621 



In re claim 23, Bianco et al. shows, in figures 1-34 and related text pattern data for the 
user is provided for the rule module by any of he following; the user, the electronic rule module 
clearinghouse, or an authorized third party (column 19, lines 13-17). 



In re claim 24, Bianco et al. shows, in figures 1-34 and related text an execution 
command for a user is provided for the rule module by any of the following the user, the electronic 
rule module clearinghouse, or an authorized third party (column 19, lines 13-17). 

In re claim 25, Bianco et al. shows in figures 1-34 and related text a primary and 
subordinated user registration step wherein a primary and subordinated user each register with 
an electronic identicator at least one registration biometric sample taken directly from the person 
of the a primary and subordinated user (column 10, lines 7-13; column 49, lines 8-65); the 
formation of a rule module customized to a primary and subordinated user in a rule module 
clearinghouse, wherein at least one pattern data of the a primary and subordinated user is 
associated with at least one execution command of the a primary and subordinated user (column 
2, lines 53-66; column 18, lines 8-17; column 49, lines 8-65); a subordinated user identification 
step, wherein the electronic indicator compares a bid biometric sample taken directly from the 
person of the subordinated user with at least one previously registered biometric sample for 
producing either a successful or failed identification of the subordinated user (column 8, lines 14 - 
21; column 49, lines 8-65); a subordination step wherein upon successful identification of the 
subordinated user, the pattern data of the subordinated user is searched to determine if any of 
the subordinated user's rule modules is subordinated to at least on of the primary user's rule 
modules(column 49, lines 8-65); a command execution step, wherein upon successful 
identification of the subordinated user and determination that at least one of the primary user's 
rule modules is subordinated to at least one of the primary user's rule modules, at least one 
previously designated execution command of the user is invoked to execute at least one 
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electronic transmission (column 8, lines 19 -21; column 24, lines 53-56; column 49, lines 8-65); 
wherein a biometrically authorized electronic transmission is conducted without the user 
presenting any personalized man-made memory tokens such as smartcards, or magnetic swipes 
(column 7, lines 47 - 67). With regard to the limitation of authenticating a user, there are many 
equivalent techniques of granting access to a user, the process being merely one of design 
choice. As shown in the definition above, granting access only to properly authorized persons 
allows access to a specified extent (rules) according to their permission right. As shown, 
identification and authorization are nearly synonymous within the electronic security arts. With 
regard to the limitation of a rules module that is "user-customized means having been customized 
by or for a user," Bianco clearly discloses biometric policies (column 18, lines 18-26), which are 
inherently set either by a user who is setting up his account or by a system administrator who 
defines access rights to a system depending on the level of permission granted. Clearly, if a user 
(primary or subordinate) is associated with a particular policy, the user is held to the rules of that 
policy. 

In re claims 26, 53, 59, 62, and 70-72, Bianco shows in figures 1-34 and related text, 
execution commands for accessing stored electronic data include permitting the user to access 
any of the following data: insurance benefits; membership benefits; event admittance; electronic 
voting privileges for elections, electronic filing for taxes; privileges for permission to write checks, 
driver's license privileges; eligibility to purchase restricted products like alcohol and tobacco; 
credit-rating report accounts, and; restricted portions of corporate intranet databases (column 2, 
lines 18-26). 

In re claims 27, 28, 29, 34, the following activities: validating a user's health insurance 
benefits to permit admission to a hospital; validating a user's eligibility to rent videos under their 
prepaid membership; validating a user's eligibility to access an Internet web site; validating a 
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user's eligibility to enter a real-time internet chat room with other people on-line; validating a 
user's eligibility to attend a music concert; validating a user's eligibility to attend a restricted event 
such as an R-rated film being shown in theatres; validating a user's eligibility to board a vehicle of 
travel, are all known in the art to require a user's identity to be validated before information is 
released or access is permitted. The specification does not say that there is any critical 
modification to the invention in order to accommodate any of the above listed activities. Bianco 
shows, in figures 1-34 and related text, validating a user's eligibility to access an Internet web-site 
(column 2, lines 1-17; column 1, lines 8-12), which is recognized in the specification as equivalent 
to the other activities, listed above. Therefore it would have been obvious to one of skill in the art 
at the time of the invention to do any of the above activities instead of validating a user's eligibility 
to access an Internet web-site for the explicit reasons discussed herein above. . 

In re claim 30, Bianco shows in figures 1-34 and related text, accessing electronic data 
comprises accessing any of the following: word-processing files; spreadsheet files; software 
code; graphics files; audio files; medical records; internet web sites; on-line audio or graphical 
content; electronic game content; on-line chat content; on-line messaging content; on-line 
educational content; on-line academic examination-taking; on-line personalized medical and 
health content, and; server-based computer software programs and hardware drivers (column 2, 
lines 1-18; column 1, lines 8-13). 

In re claim 31, Bianco shows in figures 1-34 and related text, at least one rule module 
further comprises any of the following: at least one pattern data associated with at least two 
execution commands; at least one execution command associated with at least two pattern data 
(column 18, lines 8-17). 
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In re claim 32, Bianco shows in figures 1-34 and related text, activation of an internet- 
connected device further comprises activating any of the following devices: a wireless pager; a 
wireless telephone; a network computer; an exercise machine; a television; and electronic book; 
a radio; a household appliance; a personal digital assistant; a photocopy machine; a digital audio 
player (column 1 , lines 8-22). 



In re claim 33, Bianco shows in figures 1-34 and related text, the automated intelligent 
agent for electronic data search and retrieval further comprises conducting periodic, user- 
customized on-line retrievals for any of the following data: medical updates; pending Internet 
auctions; electronic stock trades; e-mails; instant messages; voice over internet phone calls; 
electronic advertisements; faxes (column 12, lines 12-15). 

In re claim 36, Bianco shows, in figures 1 : 34 and related text, invoking a user's digital 
certificate with an electronic transmission to verify the authenticity of the sender and the 
electronic document's contents to yield a secure, authenticated electronic transmission (column 
54, lines 14-19). 

In re claim 37, Bianco shows, in figures 1-34 and related text, the processing of 
electronic transmissions further comprises execution commands, which filter the access, and 
presentation of data when the user is subordinated user (column 49, lines 39-65). 



In re claim 39, Bianco shows, in figures 1-34 and related text, execution commands for 
accessing stored electronic data include permitting the user to access any of the following: 
insurance benefits; membership benefits; event admittance; electronic voting privileges for 
elections; electronic filing for taxes; privileges for permission to write checks; driver's license 
privileges; eligibility to purchase restricted products; credit-rating and credit report accounts; 
restricted portions of corporate intranet databases (column 20, lines 17-32). 
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In re claim 41, Bianco shows, in figures 1-34 and related text, accessing membership 
benefits further comprises any of the following: validating a user's eligibility to rent videos under 
their prepaid membership; validating a user's eligibility to access an Internet web site; validating a 
user's eligibility to enter a real-time internet chat room with other people on-line (column 1, lines 
8-33). 

In re claim 43, Bianco shows in figures 1-34 and related text, any of the following: word- 
processing files; spreadsheet files; software code; graphics files; audio files; medical records; 
internet web sites; on-line audio or graphical content; electronic game content; on-line chat 
content; on-line messaging content; on-line educational content; on-line academic examination- 
taking; on-line personalized medical an health content; server-based computer software 
programs and hardware drivers (column 20, lines 17-33). 



In re claim 44, Bianco shows in figures 1-34 and related text, at least one rule module 
further comprises any of the following: at least one pattern data associated with at least two 
execution commands; at least one execution command associated with at least two pattern data 
(column 18, lines 8-17). 



In re claim 45, Bianco shows in figures 1-34 and related text, activation of an internet- 
connected device further comprises activating any of the following devices: a wireless pager; a 
wireless telephone; a network computer; an exercise machine; a television; and electronic book; 
a radio; a household appliance; a personal digital assistant; a photocopy machine; a digital audio 
player (column 1, lines 8-22). 

In re claim 46, Bianco shows in figures 1-34 and related text, the automated intelligent 
agent for electronic data search and retrieval further comprises conducting periodic, user- 
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customized on-line retrievals for any of the following data: medical updates; pending Internet 
auctions; electronic stock trades; e-mails; instant messages; voice over internet phone calls; 
electronic advertisements; faxes (column 12, lines 12-15). 

In re claim 49, Bianco shows, in figures 1-34 and related text, invoking a user's digital 
certificate with an electronic transmission to verify the authenticity of the sender and the 
electronic document's contents to yield a secure, authenticated electronic transmission (column 
54, lines 14-19). 



In re claim 50, Bianco shows, in figures 1-34 and related text, the processing of 
electronic transmissions further comprises execution commands which filter the access and 
presentation of data when the user is subordinated user (column 49, lines 39-65). 

In re claims 55, 56, 65, and 66, see Figure 15 and associated text. 



In re claims 58 and 68, see the rejections of claims 3 and 5 above. 



8. Claim 35 is rejected under 35 U.S.C. 103(a) as being unpatentable over 
Bianco/O'Flaherty/Cavoukian as applied to claim 14 above, and further in view of Herz (U.S. 
Patent No. 6,029,195). 



In re claim 35, the combination of Bianco/O'Flaherty/Cavoukian substantially discloses 
the invention as claimed but fails to show the automated intelligent agent can extrapolate from the 
user's existing preferences and on-line activity patterns to automatically and periodically 
recommend to the user new data that may expand and delete the user's pattern data and 
execution commands based upon the intelligent agent's algorithmic projection of what the user's 
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on-line preferences and activities will be in the future. Herz shows, in an analogous art related to 
identification of customized electronic desirable objects in electronic media while ensuring the 
privacy of a user, in figures 1-16 and related text, the automated intelligent agent can extrapolate 
from the user's existing preferences and on-line activity patterns to automatically and periodically 
recommend to the user new data that may expand and delete the user's pattern data and 
execution commands based upon the intelligent agent's algorithmic projection of what the user's 
on-line preferences and activities will be in the future (column 7, lines 22-35). It would have been 
obvious to one of skill in the art at the time of the invention to replace the execution command of 
Bianco/O'Flaherty/Cavoukian with the automated intelligent agent of Herz because, for reasons of 
confidentiality and privacy, a user may not want to make public his personal purchasing patterns 
thus a trustworthy method of user authentication is required prior to allowing the user to access 
his profile (Herz, column 5, lines 20-52). 

9. Claim 38 is rejected under 35 U.S.C. 103(a) as being unpatentable over 
Bianco/O'Flaherty/Cavoukian as applied to claim 13 above, and further in view of Shannon (U.S. 
Patent No. 6,233,618). 



In re claim 38, the combination of Bianco/O'Flaherty/Cavoukian substantially discloses 
the invention as claimed but fails to show the filter governs subordinated access to any of the 
following: Internet web sites with adult content; internet sites with violent content; on-line session 
length; educational on-line resources which are automatically "pushed" to the subordinated user 
during a particular on-line session, as pre-determined by the primary user. Shannon shows, in an 
analogous art related to an access control technique that allows an administrator to limit a 
subordinate's access to information content on the Internet, in figures 1- 4 and related text, any of 
the following: Internet web sites with adult content; internet sites with violent content; on-line 
session length; educational on-line resources which are automatically "pushed" to the 
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subordinated user during a particular on-line session, as pre-determined by the primary user 
(column 2, lines 43-52). It would have been obvious to one of skill in the art at the time of the 
invention to replace the filtered content of Bianco/O'Flaherty/Cavoukian with the filtered content of 
Shannon because restricted access may be useful in the home to deny access to objectionable 
web page material requested by children (Shannon, column 1, lines 47-67). 



10. Claim 40 is rejected under 35 U.S.C. 103(a) as being unpatentable over 
Bianco/O'Flaherty/Cavoukian as applied to claim 39 above, and further in view of Stock et al. 
(U.S. Patent No. 6,011,858). 

In re claim 40, the combination of Bianco/O'Flaherty/Cavoukian substantially discloses 
the invention as claimed but fails to show accessing insurance benefits further comprises 
validating a user's health insurance benefits to permit admission to a hospital. Stock et al. shows, 
in an analogous art related to biometric authentication of identity, in figures 1-10 and related text, 
accessing insurance benefits further comprises validating a user's health insurance benefits to 
permit admission to a hospital (column 7, lines 1 1-28). It would have been obvious to one of skill 
in the art at the time of the invention to replace the stored electronic data of 
Bianco/O'Flaherty/Cavoukian with the insurance data a Stock et al. because conventional 
methods of verifying insurance, such as memory cards, are subject to fraud (column 1, line 50 - 
column 2, line 27). 
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11. Claims 42 & 47 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Bianco/O'Flaherty/Cavoukian as applied to claim 39 above, and further in view of Mann et al. 
(U.S. Patent No. 6,119,096). 



In re claim 42, the combination of Bianco/O'Flaherty/Cavoukian substantially discloses 
the invention as claimed but fails to show any of the following: validating a user's eligibility to 
attend a music concert; validating a user's eligibility to attend a restricted event such as an R- 
rated film being shown in theatres; validating a user's eligibility to board a vehicle of travel. Mann 
et al. shows, in an analogous art related to biometric access control the events, tourist attractions 
and transit systems, in figures 1-9 an related text, any of the following: validating a user's 
eligibility to attend a music concert; validating a user's eligibility to attend a restricted event such 
as an R-rated film being shown in theatres; validating a user's eligibility to board a vehicle of 
travel (column 4, lines 34-47). It would have been obvious to one of skill in the art at the time of 
the invention to replace the stored electronic data of Bianco/O'Flaherty/Cavoukian with the 
membership data of Mann et al. because conventional event "tickets" are subject to resale and 
scalping (Mann et al., column 1, lines 46-59). 

In re claim 47, the combination of Bianco/O'Flaherty/Cavoukian substantially discloses 
the invention as claimed. Mann et al shows, in figures 1-9 and related text, the vehicle of travel 
further comprises any of the following; a train; a boat; a bus (column 12, lines 45-53). It would 
have been obvious to one of ordinary skill in the art to combine Bianco/O'Flaherty/Cavoukian with 
Mann because various modes of transportation are common. 
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12. Claim 48 is rejected under 35 U.S.C. 103(a) as being unpatentable over 
Bianco/O'Flaherty/Cavoukian as applied to claim 46 above, and further in view of Herz (U.S. 
Patent No. 6,233,618). 



In re claim 48, the combination of Bianco/O'Flaherty/Cavoukian substantially discloses 
the invention as claimed but fails to show the automated intelligent agent can extrapolate from the 
user's existing preferences and on-line activity patterns to automatically . and periodically 
recommend to the user new data that may expand and delete the user's pattern data and 
execution commands based upon the intelligent agent's algorithmic projection of what the user's 
on-line preferences and activities will be in the future. Herz shows, in an analogous art related to 
identification of customized electronic desirable objects in electronic media while ensuring the 
privacy of a user, in figures 1-16 and related text, the automated intelligent agent can extrapolate 
from the user's existing preferences and on-line activity patterns to automatically and periodically 
recommend to the user new data that may expand and delete the user's pattern data and 
execution commands based upon the intelligent agent's algorithmic projection of what the user's 
on-line preferences and activities will be in the future (column 7, lines 22-35). It would have been 
obvious to one of skill in the art at the time of the invention to replace the execution command of 
Bianco with the automated intelligent agent of Herz because, for reasons of confidentiality and 
privacy, a user may not want to make public his personal purchasing patterns thus a trustworthy 
method of user authentication is required prior to allowing the user to access his profile (Herz, 
column 5, lines 20-52). 
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13. Claim 51 is rejected under 35 U.S.C. 103(a) as being unpatentable over 
Bianco/O'Flaherty/Cavoukian as applied to claim 50 above, and further in view of Shannon (U.S. 
Patent No. 6,233,618). 

In re claim 51, the combination of Bianco/O'Flaherty/Cavoukian substantially discloses 
the invention as claimed but fails to show the filter governs subordinated access to any of the 
following: Internet web sites with adult content; internet sites with violent content; on-line session 
length; educational on-line resources which are automatically "pushed" to the subordinated user 
during a particular on-line session, as pre-determined by the primary user. Shannon shows, in an 
analogous art related to an access control technique that allows an administrator to limit a 
subordinate's access to information content on the Internet, in figures 1- 4 and related text, any of 
the following: Internet web sites with adult content; internet sites with violent content; on-line 
session length; educational on-line resources which are automatically "pushed" to the 
subordinated user during a particular on-line session, as pre-determined by the primary user 
(column 2, lines 43-52). It would have been obvious to one of skill in the art at the time of the 
invention to replace the filtered content of Bianco with the filtered content of Shannon because 
restricted access may be useful in the home to deny access to objectionable web page material 
requested by children (Shannon, column 1, lines 47-67). 
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Conclusion 

14. Applicant's amendment necessitated the new ground(s) of rejection presented in this Office 
action. Accordingly, THIS ACTION IS MADE FINAL. See MPEP § 706.07(a). Applicant is 
reminded of the extension of time policy as set forth in 37 CFR 1.136(a). 

15. A shortened statutory period for reply to this final action is set to expire THREE MONTHS from 
the mailing date of this action. In the event a first reply is filed within TWO MONTHS of the 
mailing date of this final action and the advisory x action is not mailed until after the end of the 
THREE-MONTH shortened statutory period, then the shortened statutory period will expire on the 
date the advisory action is mailed, and any extension fee pursuant to 37 CFR 1.136(a) will be 
calculated from the mailing date of the advisory action. In no event, however, will the statutory 
period for reply expire later than SIX MONTHS from the date of this final action. 
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Any inquiry of a general nature or relating to the status of this application or concerning 
this communication or earlier communications from the Examiner should be directed to James A. 
Reagan whose telephone number is 571.272.6710. The Examiner can normally be reached on 
Monday-Friday, 9:30am-5:00pm. If attempts to reach the examiner by telephone are 
unsuccessful, the Examiner's supervisor, James Trammell can be reached at 571.272.6712. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR system, 
see http://portal.uspto.gov/external/portal/pair . Should you have questions on access to the 
Private PAIR system, contact the Electronic Business Center (EBC) at 866.217.9197 (toll-free). 

Any response to this action should be mailed to: 



or faxed to: 

571-273-8300 [Official communications, After Final communications labeled "Box AF"] 
571-273-8300 [Informal/Draft communications, labeled "PROPOSED" or "DRAFT"] 

Hand delivered responses should be brought to the United States Patent and 
Trademark Office Customer Service Window: 



Commissioner of Patents and Trademarks 



Washington, D.C. 20231 



Randolph Building 



401 Dulany Street 



Alexandria, VA 22314. 



JAMES A. REAGAN 
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Primary Examiner 
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